Community ID flow hashing
Project description
pycommunityid
This package provides a Python implementation of the open Community ID flow hashing standard.
It supports Python versions 2.7+ and 3+.
Installation
This package is available on PyPI, therefore:
pip install communityid
To install locally from a git clone, you can use also use pip, e.g. by saying
pip install -U .
Usage
The API breaks the computation into two steps: (1) creation of a flow tuple object, (2) computation of the Community ID string on this object. It supports various input types in order to accommodate network byte order representations of flow endpoints, high-level ASCII, and ipaddress objects.
Here's what it looks like:
import communityid
cid = communityid.CommunityID()
tpl = communityid.FlowTuple.make_tcp('127.0.0.1', '10.0.0.1', 1234, 80)
print(cid.calc(tpl))
This will print "1:mgRgpIZSu0KHDp/QrtcWZpkJpMU=".
The package includes three sample applications:
-
community-id, which calculates the ID directly for given flow tuples. It supports a small but growing list of parsers. Example:
$ community-id tcp 10.0.0.1 10.0.0.2 10 20 1:9j2Dzwrw7T9E+IZi4b4IVT66HBI=
-
community-id-pcap, which iterates over a pcap via dpkt and renders Community ID values for each suitable packet in the trace. This exercices the package's "low-level" API, using flow tuple values as you'd encounter them in a typical network monitor.
-
community-id-tcpdump, which takes tcpdump output on stdin and augments it with Community ID values on stdout. This exercices the package's "high-level" API, using ASCII representations of tuple values.
Testing
The package includes a unittest testsuite in the tests directory that runs without installation of the module. You can invoke it as usual, e.g. via:
python -m unittest communityid_test
or
nose2 -C --coverage ../communityid --coverage-report term-missing communityid_test
Project details
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Hashes for communityid-1.2-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | a70ea059b71c4c2d49d380225675b05f9cd3ae4b9568151d61ec825c0cc02c33 |
|
MD5 | dd8d76f5e4f0e9cbbb86d5d1ac4e1ce4 |
|
BLAKE2b-256 | a862d93fe7e6d549185565e5950b5099cab741688659e0776432f2299eb7faf9 |